tataplay.com

- Tata Play Ltd -

Issued by GeoTrust EV RSA CA G2

About this certificate

This digital certificate with serial number 08:69:48:4b:58:15:3c:a5:ee:e1:1c:34:43:e0:32:48 was issued on by DigiCert Inc.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Tata Play Ltd

Company registration number: 130365
Organization: Tata Play Ltd
State / Province: Maharashtra
Locality: Mumbai
Country: IN

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 08:69:48:4b:58:15:3c:a5:ee:e1:1c:34:43:e0:32:48
Serial Number (int): 11180481439289490083727090177527525960
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 22:9b:93:b6:08:75:74:40:32:e6:05:16:44:58:71:ef:82:d6:4a:d6
AuthorityKeyId: 28:d2:cf:ee:09:84:75:dd:b5:b2:b5:bf:3c:d5:a0:c6:73:88:5d:1f

Fingerprint (sha1): 94:89:d3:74:91:40:6d:1c:f3:2c:4c:ca:ce:14:d6:69:a9:96:c2:a4
Fingerprint (sha256): 02:dc:63:a6:3f:58:12:69:da:e7:80:2e:b5:34:c8:c2:9f:96:b7:7a:0d:b5:7e:93:68:05:49:f8:a8:c1:aa:4c

Issuing Certificate URL: http://cacerts.digicert.com/GeoTrustEVRSACAG2.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/GeoTrustEVRSACAG2.crl
CRL Distribution Point: http://crl4.digicert.com/GeoTrustEVRSACAG2.crl

Check the revocation status for certificate tataplay.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for tataplay.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

tataplay.com
www.tataplay.com

Other certificates including the domain name tataplay.com

(limited to 100 certificates)
qa-secureapi.tataplay.com
intapigw.binge.tataplay.com
cdevdvr.tataplay.com
cloud-gitlab.tataplay.com
devmanageapps.tataplay.com
tataplay.com
training.tataplay.com
smpuat.tataplay.com
servicedesk.gainsight.com
clmuat.tataplay.com
gstms.tataplay.com
apigw.dbss.tataplay.com
chat.tataplay.com
training.tataplay.com
idmgmt.tataplay.com
beta-portal.tataplay.com
pmt.dbss.tataplay.com
cuatmdu.tataplay.com
myprm.tataplay.com
victory.tataplay.com
mail.tataplay.com
*.tataplay.com
helpdesk.allinoneservices.in.net
safepulse1.tataplay.com
watch.tataplay.com
customer-sdpondemand.manageengine.in
partnerintq.tataplay.com
mservicedev.tataplay.com
aiuat.tataplay.com
tataplay.com
*.tataplay.com
help.tataplay.com
prodmduwoc.tataplay.com
uat-b2b.tataplay.com
devhelp.tataplay.com
dev.smp.dbss.tataplay.com
uatwawebhooks.tataplay.com
msales.tataplay.com
ig.infogain.com
uat-portal.tataplay.com
uatwebhookbinge.tataplay.com
pre-portal.tataplay.com
uatmservice.tataplay.com
eventapiuat.tataplay.com
legatrix.tataplay.com
fsreports.tataplay.com
uat-bchatbot-dashboard.tataplay.com
uatwapwebhooks.tataplay.com
mservice.tataplay.com
help.tataplay.com
staging-watch.tataplay.com
dev-portal.tataplay.com
endpoint.manageengine.live
beta-manageapps.tataplay.com
servicedesk.vsoftconsulting.com
partner.tataplay.com
uatwaapi.tataplay.com
uatwapwebhooks.tataplay.com
dev-b2b.tataplay.com
hobsiras.tataplay.com
selfcare.tataplay.com
uatgstms.tataplay.com
cuatdvr.tataplay.com
tataplay.com
servicedesk.decisionfoundry.com
uatevd.tataplay.com
prime.tataplay.com
uatwawebhooks.tataplay.com
care.spacematrix.com
ig.infogain.com
uatmservice.tataplay.com
trai.tataplay.com
humanresource.thepawscuers.life
services.mdu.tataplay.com
*.tataplay.com
watch.tataplay.com
vizcloud.tataplay.com
kpi.tataplay.com
beta-manageapps.tataplay.com
onedesk.tataplay.com
uat-portal.tataplay.com
services.mdu.tataplay.com
wawebapp.tataplay.com
roe.tataplay.com
servicedesk.celestialsys.com
uat-portal.tataplay.com
associates.tataplay.com
dev-portal.tataplay.com
onedesk.tataplay.com
servicedesk.celestialsys.com
dchatsrv.tataplay.com
beta.msales.tataplay.com
uatwabinge.tataplay.com
servicedesk.gainsight.com
contracts.tataplay.com
login.mdu.tataplay.com
taops.fractal.ai
evd.tataplay.com
hotfix.msales.tataplay.com
aaaa-uat.tataplay.com

Certificate

The complete raw certificate details for tataplay.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnrhZiQUZesMetK7dusDH
41+0vYL3Do7bmqDzY1Kzoyj/Fybfmi0SQLXv4oZJg56XBQbDWsJJNlMR7XMFAfN/
ueslbxsQ9T4GDAqtwfKiIiuy6S7sy8TrKNMviB+DF78gP4C4nJtiWJ1PBuYw202M
n2ON99xJQkDYhLHg4ZYMqDUvXDNFF9ilRpkWcsc3C8pHVuwTFE9boORox2GPwM0D
R1hRxpzE3YoZb/sfOWZLpWAdL0vWF9k9VH76lAoUVnpSktAC75/Sbwq/QB8koWRA
3bDdKIaZJRUCsA38vMCBlypErBmL1EtM6XNGjEeUDcIoBFw9kyMsBcoQCe5ZOURm
nwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 11180481439289490083727090177527525960
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust EV RSA CA G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-04 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-03 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IN'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '130365'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IN'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Maharashtra'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Mumbai'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Tata Play Ltd'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'tataplay.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20036558433009211062087745282541255302408719640012438276945280981536470751910569178472084498555180418975471964577336922133587080702521828699377105857127286698286508170765373501524924427759046788038570384583144298792784972345457320984621149639693994148468670553229151431967801819384504959747078801554275127184015653802273010035300602674370144751621907069078683687902769630451406071639551769834782483870214396728874634379000383699642404771646664835462058476733504944143020101853892695256343704892372656071964049388858113862050728013776747686392519707312171427657253475668226337184053320470045052620557246656071394944671
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 28d2cfee098475ddb5b2b5bf3cd5a0c673885d1f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							229b93b60875744032e60516445871ef82d64ad6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tataplay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tataplay.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.2.1 (DigiCert EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (110 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/GeoTrustEVRSACAG2.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/GeoTrustEVRSACAG2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/GeoTrustEVRSACAG2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							01680076004e75a3275c9a10c3385b6cd4df3f52eb1df0e08e1b8d69c0b1fa64b1629a39df0000018cd2ed7a280000040300473045022100f96fe930c634dbe8567ab9e32da853825770a50757e9ee105d21675ee12bd6e8022065b484119bec25b17eedf730c0f83dc351fa9201b74a5d09f3904463a79037b90076003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e0000018cd2ed7a7d0000040300473045022100d9287b84e115cc0f81db13aa7b4ee032175671a63440be9d648f1dff70d846cb022010d39d28287110a6091aca37aca23d366e294a175a253a15f9710dd55abb2e760076007d591e12e1782a7b1c61677c5efdf8d0875c14a04e959eb9032fd90e8c2e79b80000018cd2ed7a660000040300473045022100b9101e7bc814e207d72dd13d057cac343ec4b6e9a1b7acdd3655006c4bece8c4022038de061d2955c7eb9a846b3a32b7b0555cafdb8d91fa4573cfd1d8c8b93b3770
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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